Quick Tips 5

Question 1

A BLANK is carried out by gathering data pertaining to how something works and using that data to attack it or crack it, as in differential power analysis or electromagnetic analysis.

Answer 1

side channel attack

Question 2

BLANK takes place when a user gains too much access rights and permissions over time.

Answer 2

Authorization creep

Question 3

BLANK is a single sign-on technology developed to address issues in Kerberos. It is based upon public key cryptography (asymmetric) and uses privileged attribute servers and certificates.

Answer 3

SESAME

Question 4

Security information and event management implements BLANK functionality to be carried out on centralized logs for situational awareness capabilities.

Answer 4

data mining and analysis

Question 5

BLANK are either host or network based and provide behavioral (statistical) or signature (knowledge) types of functionality.

Answer 5

Intrusion detection systems

Question 6

Phishing is a type of social engineering attack. If it is crafted for a specific individual, it is called BLANK. If a DNS server is poisoned and points users to a malicious website, this is referred to as BLANK.

Answer 6

spear-phishing, pharming

Question 7

A web portal is commonly made up of BLANK, which are pluggable user interface software components that present information and services from other systems.

Answer 7

portlets

Question 8

The BLANK allows for the automation of user management (account creation, amendments, revocation) and access entitlement configuration related to electronically published services across multiple provisioning systems.

Answer 8

Service Provisioning Markup Language (SPML)

Question 9

The BLANK allows for the exchange of authentication and authorization data to be shared between security domains.

Answer 9

Security Assertion Markup Language (SAML)

Question 10

The BLANK is a protocol specification for exchanging structured information in the implementation of web services and networked environments.

Answer 10

Simple Object Access Protocol (SOAP)

Question 11

BLANK environments allow for a suite of interoperable services to be used within multiple, separate systems from several business domains.

Answer 11

Service oriented architecture (SOA)

Question 12

BLANK is a technology that provides data communication through the use of radio waves.

Answer 12

Radio-frequency identification (RFID)

Question 13

BLANK identifies potential threats and attack vectors. BLANK identifies weaknesses and lack of countermeasures.

Answer 13

Threat modeling, Vulnerability analysis